Android Intent Resolver ChooserActivity Cross-Profile Privilege Escalation Vulnerability

A vulnerability has been identified in the Android Intent Resolver module, specifically within the ChooserActivity. The issue arises from improper input validation, allowing an app to launch the ChooserActivity in a different profile. This flaw could lead to local escalation of privilege, with no additional execution privileges required. Exploitation of this vulnerability does not necessitate user interaction.

Impact

Exploitation of this vulnerability could result in unauthorized privilege escalation, allowing a user or application to gain elevated rights or access within the system.

Remediation

Users can update their devices to the September 2025 security patch level to address this vulnerability.